Preparing our next security sprint to harden OpenAI
OpenAI launches a security sprint to test and harden its systems using internal models and external partners, while expanding its Bug Bounty rewards and subsidized access for defenders.
OpenAI will host an internal security sprint, assembling researchers and security partners to probe its systems using its own models. The company is collaborating with Cathedral, whose experts will work alongside OpenAI’s teams to identify weaknesses and improve defenses. The partnership aims to bring fresh perspectives and specialized approaches to strengthen OpenAI’s platforms against emerging threats.
The company is also expanding its Security Bug Bounty program, more than quadrupling rewards for critical findings to incentivize external researchers. OpenAI seeks to challenge its assumptions and refine both its systems and defensive methods through collaborative scrutiny. This initiative reflects a broader effort to use AI proactively in identifying and addressing vulnerabilities before they can be exploited.
Building on a previous sprint, OpenAI dedicated a quarter of its product engineers to finding and fixing weaknesses using Codex. Engineers reproduced vulnerabilities in isolated environments and prepared patches for review, demonstrating the practical impact of integrating AI into cybersecurity workflows. The company emphasizes that traditional defenses are no longer sufficient against rapidly evolving threats.
OpenAI is committing $1 billion in subsidized access over six months for frontline defenders protecting essential services and digital infrastructure. The company will also share its architecture, lessons, and a blueprint for empowering cyber defenders across industry and government. The goal is to expand access for trusted defenders and advance models to strengthen collective security efforts.